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#Malware_analysis 

Cuckoo 3 is a Python 3 open source automated malware analysis system 
https://github.com/cert-ee/cuckoo3 

ZLoader Campaign Exploiting Signature Verification Bug 
https://research.checkpoint.com/.../can-you-trust-a-files... 

Code Reuse in the Malware Landscape 
https://isc.sans.edu/.../Code+Reuse+In+the+Malware.../28216 

Agent Tesla Updates 

https://isc.sans.edu/.../Agent+ Tesla+Updates+SMTP.../28190 

Malicious Telegram Installer Drops Purple Fox Rootkit 
https://blog.minerva-labs.com/malicious-telegram... 

Skrull - A Malware DRM, That Prevents Automatic Sample Submission By AV/EDR 
and Signature Scanning From Kernel 
https://github.com/aaaddress1/Skrull 

Labs for Practical Malware Analysis & Triage 
https://github.com/HuskyHacks/PMAT-labs 

Quasar RAT 

https://sfkino.tistory.com/80 

Analyzing an IcedID Loader Document 
https://forensicitguy.github.io/analyzing-icedid-document 

Anti-virus artifacts. Listing APls hooked by: Avira, BitDefender, F-Secure, 
MalwareBytes, Norton, TrendMicro, WebRoot 
https://github.com/ethereal-vx/Antivirus-Artifacts 

Malicious npm Packages Are After Your Discord Tokens - 17 New Packages 
Disclosed 

https://jfrog.com/.../malicious-npm-packages-are-after... 

BRATA - Mobile banking fraud 
https://www.cleafy.com/.../mobile-banking-fraud-brata... 

Ploutus ATM Malware Case Study: Automated Deobfuscation of a Strongly (7 
Obfuscated .NET Binary 
https://www.crowdstrike.com/.../ploutus-atm-malware... 

How to Deobfuscate Maze Ransomware 
https://www.crowdstrike.com/.../maze-ransomware... 
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Malware Analysis 


Static Dynamic Manual 


4 Fast and safe 4 Resident to 4 The most accurate 
Examine all execution obfuscation and results 
path packing techniques &@ Always needed in the 
Wwe akness against 4 Support arm race with 
obfuscation techniques automatization malware authors 
Weakness against anti- 4 Relatively fast and Needs practice and 
debug, anti-disassembly accurate findings deep know-ledge 
Resource and time- Dedicated human 
intensive resource 
b Weakness against 
anti-vm 
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